Endpoint Security Analyst

The Endpoint Cybersecurity Vulnerability Remediation Analyst is responsible for identifying, analyzing, prioritizing, and remediating cybersecurity vulnerabilities across enterprise workstation and server environments.

This position serves as a key operational link between Cybersecurity and IT Operations, with a strong focus on converting vulnerability findings into measurable remediation results. The analyst will regularly review vulnerability and exposure data from Crowd Strike Falcon, validate findings, determine appropriate remediation actions, and work directly with endpoint, server, application, and infrastructure teams to ensure vulnerabilities are resolved within established Operational Level Agreements (OLAs).

This is a hands‑on, mid-level technical position requiring strong troubleshooting, vulnerability management, Windows administration, patching, and automation skills.

• Review vulnerability reports, dashboards, and exposure data generated through Crowd Strike Falcon and related cybersecurity tools.
• Analyze open vulnerabilities affecting enterprise Windows, Linux, and MacOS workstations and servers.
• Validate vulnerability findings to determine affected systems, software versions, available patches, configuration changes, and other remediation options.
• Prioritize remediation based on CVSS severity
• Prioritize remediation based on Active or known exploitation
• Prioritize remediation based on Asset criticality
• Prioritize remediation based on Business impact
• Prioritize remediation based on Age of the vulnerability
• Prioritize remediation based on Established organizational OLAs

• Identify vulnerabilities that require immediate escalation due to active exploitation or significant organizational risk.
• Distinguish between vulnerabilities requiring operating system patches, application updates, configuration changes, software removal, or compensating controls.

• Take direct ownership of assigned vulnerabilities from identification through successful remediation.
• Deploy and coordinate security patches for Windows workstations and servers, Linux servers, and MacOS devices.
• Use Microsoft Intune, Azure Update Manager, SCCM, Patch My PC, Power Shell, and other enterprise management tools to deploy and automate remediation.
• Work with server administrators and infrastructure teams when remediation requires server patching, configuration changes, application upgrades, or maintenance windows.
• Troubleshoot failed patches and unsuccessful remediation attempts.
• Develop remediation solutions for vulnerabilities where traditional patching is not available.
• Remove or upgrade obsolete, unsupported, and vulnerable software when appropriate.
• Validate that remediation actions have successfully eliminated or mitigated the identified vulnerability.
• Ensure remediation activities minimize disruption to business operations.

• Monitor vulnerability aging and ensure assigned vulnerabilities are remediated within established OLAs.
• Maintain visibility into vulnerabilities approaching or exceeding OLA thresholds.
• Proactively escalation vulnerabilities that are at risk of missing remediation targets.
• Investigate vulnerabilities that remain open after remediation attempts and determine the root cause.
• Assist with reducing the organization's existing vulnerability backlog.
• Identify recurring vulnerabilities and recommend systemic solutions rather than repeatedly addressing individual systems.
• Track remediation progress and provide accurate status information to Cybersecurity and IT leadership.
• Support exception and risk-acceptance processes when vulnerabilities cannot be remediated within established time frames.
• Develop Power Shell scripts and other automation to improve vulnerability remediation at scale.
• Automate repetitive activities such as software detection, version validation, application removal, patch deployment, configuration changes, and remediation verification.
• Develop Intune remediation scripts and deployment packages where appropriate.
• Identify opportunities to move from manual remediation to automated and policy-driven remediation.
• Analyze recurring vulnerability trends and recommend improvements to endpoint and server configuration standards.
• Create reusable remediation procedures for commonly identified vulnerabilities.

Assist with tracking and reporting key vulnerability-management metrics, including:

• Critical and High…